Security

What is in place today.

Payments

• Payments run on Stripe Checkout. Card details are entered on Stripe and never reach this system.
• Agents are instructed never to ask for card, bank or Social Security numbers.

Accounts and access

• Passwords are stored as salted scrypt hashes, never in plain text.
• Every record is scoped to your organization.
• Owners and admins control settings. Team members have limited access.

Customer conversations

• Residents confirm their identity before an agent discusses an account.
• Every message, and every action an agent takes, is recorded in your inbox.
• Texting opt-outs (STOP) are honored automatically.

Connections

• All traffic is encrypted in transit.
• Incoming phone, text and payment events are checked against provider signatures.
• Outgoing webhooks are signed so you can verify they came from us.